$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/B453EBC4BB4011EAAF70B028C4F9AE02.roa File: B453EBC4BB4011EAAF70B028C4F9AE02.roa (raw, json) Hash identifier: UE5+ErJEcnaRAzrTj0O4uJaAR4eaT67kWYQs9QGi9rM= Subject key identifier: 15:56:09:0C:0E:B1:DB:CA:54:C8:3E:A3:40:9D:71:2F:0B:6E:E2:33 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 091E Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/B453EBC4BB4011EAAF70B028C4F9AE02.roa Signing time: Tue 04 Nov 2025 20:39:32 +0000 ROA not before: Tue 04 Nov 2025 20:39:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133073 IP address blocks: 202.43.232.0/24 maxlen: 24 2400:51c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: Nov 4 20:39:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a6484-d1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:05:b3:d3:4c:de:07:3d:ae:c9:ac:65:86: cd:2d:0c:48:8c:d2:4c:50:b9:8c:7c:7a:af:ed:25: b8:fb:8c:a8:64:6d:c7:06:9a:b5:30:c9:37:36:6a: fd:d4:d7:92:87:71:8e:07:3c:2a:7c:48:2e:24:87: 64:44:78:f7:65:71:99:77:b9:d3:1e:98:50:b4:cc: 63:83:3d:15:b5:ff:92:c0:6f:3b:99:9a:f4:4f:ef: 49:b3:5f:17:53:df:07:6a:c0:05:3f:cd:97:c8:f2: 02:41:d1:60:57:eb:5f:8f:16:16:70:a6:c7:66:85: 74:c6:1e:c4:3b:57:3c:05:6a:ba:d5:d0:66:1c:50: 10:04:ab:a6:fc:a3:5f:3e:45:be:96:32:4d:e8:45: 8c:8f:a3:f3:4d:a9:04:17:30:bb:3c:34:8f:49:18: 26:3e:10:53:64:56:29:42:ed:1b:88:73:4b:e5:c4: 57:98:d1:62:b6:d9:c4:fd:ac:51:91:54:f5:e6:75: 6c:ba:07:5d:09:1f:b2:63:84:8c:67:81:20:07:52: 54:0a:45:37:b6:e2:82:be:e8:66:1a:fd:ce:bb:47: eb:8e:5a:df:08:d9:7d:ec:34:c8:03:5d:a8:e9:13: bb:bf:4c:61:1e:40:89:95:67:b5:00:1e:de:32:7b: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:56:09:0C:0E:B1:DB:CA:54:C8:3E:A3:40:9D:71:2F:0B:6E:E2:33 X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/B453EBC4BB4011EAAF70B028C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.232.0/24 IPv6: 2400:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:d2:c0:6b:8f:0b:cb:89:0d:ec:0f:de:78:10:c2:02:e7:f8: d7:d2:8d:cc:31:90:54:91:8f:92:4f:c9:9e:a7:46:fa:34:51: 26:3a:58:66:16:56:dd:ad:21:f8:27:b5:2f:6f:7e:33:ae:1e: dc:fb:6d:50:d1:41:e0:ba:6e:d0:b3:13:95:b3:36:db:5d:15: ff:50:3b:0a:33:e1:18:47:5a:bc:2c:d0:59:a4:3d:22:f8:8f: 3b:c6:b7:88:dd:ad:34:e9:9a:9e:c6:8a:23:eb:0b:21:c1:c5: e7:fc:f6:3a:a1:3c:3a:95:da:a0:ea:ad:93:0f:e1:ce:62:7a: f3:59:a5:86:b1:47:0b:b1:57:a4:c2:dd:dc:33:d3:26:5f:6f: 4a:92:ea:d1:04:af:67:69:7f:37:10:b4:09:77:e1:66:3c:f1: 09:99:a1:b6:70:86:5e:62:42:76:c5:38:58:ad:bb:aa:a9:42: f4:94:ad:67:0c:b1:a5:1e:00:2b:03:fd:85:df:42:4a:b9:20: 4f:68:85:e6:e0:d6:dd:e3:4e:94:05:4f:09:27:6f:dc:ba:14: a6:69:43:e0:b4:08:aa:50:70:f9:f5:5f:15:e6:d9:1b:25:10: b9:3d:2d:e1:53:d9:eb:81:c8:99:14:15:b8:32:b0:82:0f:f7: 9c:d9:ca:fa -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUxMTA0MjAzOTMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNjQ4NC1kMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpsFs9NM3gc9rsmsZYbNLQxIjNJMULmMfHqv7SW4+4yoZG3HBpq1MMk3Nmr9 1NeSh3GOBzwqfEguJIdkRHj3ZXGZd7nTHphQtMxjgz0Vtf+SwG87mZr0T+9Js18X U98HasAFP82XyPICQdFgV+tfjxYWcKbHZoV0xh7EO1c8BWq61dBmHFAQBKum/KNf PkW+ljJN6EWMj6PzTakEFzC7PDSPSRgmPhBTZFYpQu0biHNL5cRXmNFittnE/axR kVT15nVsugddCR+yY4SMZ4EgB1JUCkU3tuKCvuhmGv3Ou0frjlrfCNl97DTIA12o 6RO7v0xhHkCJlWe1AB7eMnv0awIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBVWCQwO sdvKVMg+o0CdcS8LbuIzMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDUyQUMvQTQ4RDU5NjZCQjNFMTFFQUEyOUVFMzIxQzRGOUFFMDIvQjQ1M0VCQzRC QjQwMTFFQUFGNzBCMDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBADKK+gwDQQCAAIwBwMFACQAUcAwDQYJKoZIhvcNAQELBQAD ggEBAJvSwGuPC8uJDewP3ngQwgLn+NfSjcwxkFSRj5JPyZ6nRvo0USY6WGYWVt2t IfgntS9vfjOuHtz7bVDRQeC6btCzE5WzNttdFf9QOwoz4RhHWrws0FmkPSL4jzvG t4jdrTTpmp7GiiPrCyHBxef89jqhPDqV2qDqrZMP4c5ievNZpYaxRwuxV6TC3dwz 0yZfb0qS6tEEr2dpfzcQtAl34WY88QmZobZwhl5iQnbFOFitu6qpQvSUrWcMsaUe ACsD/YXfQkq5IE9ohebg1t3jTpQFTwknb9y6FKZpQ+C0CKpQcPn1XxXm2RslELk9 LeFT2euByJkUFbgysIIP95zZyvo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:06 2025 by rpki-client